Privacy Policy

LAST REVISED: SEPTEMBER 2026 • EFFECTIVE IMMEDIATELY • GDPR & UK DPA COMPLIANT
🌲 Privacy at a Glance: QRCache is built with an Anti-Troll Code-Gated Architecture. We do not host a public, searchable directory of trackables, and we actively block search engine web crawlers. Your journey milestones and photos are accessible only to individuals who possess the physical tag's 6-character code or QR scan.

1. Data Controller Information

QRCache ("we", "us", or "our") operates the web platform located at qrcache.com as a free community utility for geocachers, hikers, and outdoor enthusiasts.

For any privacy inquiries, data subject access requests, or removal requests, you can contact our administration team via our Contact & Feedback Form.

2. Anti-Troll & Anti-Indexing Architecture

To protect physical geocaches, private trailheads, and coin owners from armchair trolling and automated scraper exploitation:

  • No Public Directory: There is no page listing active item codes or coordinates for mass browsing.
  • Code-Gated Access: Item dossiers, milestone maps, and log history are exclusively viewable by entering the specific 6-character code (e.g. QC-XXXX) or scanning its physical QR tag.
  • Search Engine Crawler Shield: We enforce strict anti-indexing protocols via robots.txt, X-Robots-Tag: noindex, nofollow, noarchive, nosnippet HTTP response headers, and meta robots tags across all pages.

3. Information We Collect

We only collect data necessary to provide and maintain tracking journeys:

  • User-Generated Trail Data: Geocacher handles/names, log comments, log dates, GC reference codes, and voluntary photos uploaded when recording a drop or discovery.
  • Trackable Profile Data: Item names, missions/goals, background descriptions, and initial origin coordinates provided during registration.
  • Contact & Feedback Submissions: Your name/handle, email address, topic, and message when using our Contact Form. Messages are securely routed directly to the administrative team.
  • Technical Telemetry & Cookies: Device type, approximate geographic region, page interaction metrics, and anonymized identifiers collected strictly in accordance with your consent preferences.

4. Google Consent Mode v2 & Cookie Policy

In full compliance with European Economic Area (EEA), UK GDPR, and international ePrivacy directives, QRCache implements Google Consent Mode v2.

By default, when you first visit our site:

  • ad_storage is set to denied
  • ad_user_data is set to denied
  • ad_personalization is set to denied
  • analytics_storage is set to denied

If you choose "Accept All", telemetry and measurement cookies are dynamically enabled. If you choose "Essential Only", these tags remain disabled, and only your choice is remembered locally in your browser's localStorage (key: qrcache_cookie_consent).

You can review or change your cookie preferences at any time by clicking Cookie Settings in the footer.

5. Lawful Bases for Processing (GDPR Article 6)

We process personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a)): For optional analytics and advertising cookies via our consent banner.
  • Contract & Service Performance (Art. 6(1)(b)): To register droppables, store log milestones, compute travel mileage, and render maps as requested.
  • Legitimate Interests (Art. 6(1)(f)): To safeguard the platform against abuse, spam, and armchair trolling, and to answer user-initiated support requests.

6. Third-Party Integrations & Google AdSense

To fund free platform operations, power map visualization, and perform cache lookups, we interact with:

  • Google AdSense & Advertising Cookies: Third-party vendors, including Google, use cookies to serve advertisements based on a user's prior visits to this website or other websites on the Internet. Google's use of advertising cookies enables it and its partners to serve relevant ads based on your visit to QRCache and/or other websites across the web.
  • Personalized Advertising Opt-Out: Users may opt out of personalized advertising at any time by visiting Google Ads Settings. Alternatively, you can opt out of third-party vendor cookies for personalized advertising by visiting www.aboutads.info.
  • European Regulations & Consent: For visitors residing in the European Economic Area (EEA), United Kingdom, and Switzerland, advertising and personalization cookies are disabled by default until explicit consent is granted via our consent banner. You may change or revoke this consent anytime via the Cookie Settings link in the footer.
  • Leaflet & OpenFreeMap / OpenStreetMap: Map tiles for displaying journey routes. No personal identifying information is transmitted to tile providers. Tiles are served by OpenFreeMap (ODbL licensed) with map data © OpenStreetMap contributors.
  • Groundspeak Geocaching Live API: Used solely to fetch public geocache names and coordinates when a finder inputs a GC reference code.
  • Google Tag Manager / Google Analytics: Anonymized usage measurement subject to your consent choice.

7. Data Retention & Your Rights

Under the General Data Protection Regulation (GDPR), UK Data Protection Act, and applicable privacy laws, you retain the right to:

  • Access: Request a copy of any personal data associated with your contact submissions or item owner keys.
  • Rectification: Request correction of inaccurate information on your trackable profiles.
  • Erasure ("Right to be Forgotten"): Request immediate removal of your uploaded photos, log comments, or registered droppables.

To exercise any of these rights, please submit a request via our Contact Form. We will process your verified request within 30 days without charge.